Nav-users

nav-users@lister.sikt.no

3 participants
1372 discussions

Announcement: NAV 5.8.0 released
by Morten Brekkevold 27 Nov '23

27 Nov '23

The first feature release of the 5.8 series of NAV is now out! The source code is available for download at GitHub [1]. New packages for Debian 10 (Buster) and 11 (Bullseye) are available in our APT repository [2] as usual. We haven't started building packages for Debian 12 (Bookworm) yet, but hope to do so by the end of 2023. Please be extra aware of config file changes. Look out for `*.dpkg-dist` files in `/etc/nav` and make sure to update your running config. Added ===== - Initial SNMPv3 support added to most parts of NAV - Add an SNMPv3 management profile type (#2693, #2699) - Add SNMPv3 session support to the synchronous SNMP libraries used by most parts of NAV except ipdevpoll (#2700, #2710) - Add SNMPv3 reachability tests in SeedDB IP Device registration forms (#2704, #2734, #2727, #2730) - Add SNMPv3 support to Portadmin (#2712, #2731) - Add SNMPv3 support to navsnmp command line program (#2724, #2725) - Add SNMPv3 support to Arnold (#2726, #2733) - Add SNMPv3 session support to ipdevpoll’s asynchronous SNMP libraries (#2736, #2743) - Add SNMPv3 support tonavoidverify and naventity command line programs (#2747, #2748) - Power-over-Ethernet configuration support for Cisco and Juniper equipment in PortAdmin (#2632, #2633, #2666, #2635, #2759) - Extract VLAN association from router port names on Checkpoint firewalls (#2684, #2701) - Add link to our GitHub discussion forums in “Getting help” documentation (#2746) - Add subcommand to navuser command line program for deleting users (#2705) - Add toggle in webfront.conf for automatic creation of remote users (#2698, #2707) - Add proper documentation index page for all howto guides (#2716) Developer-centric additions --------------------------- - Add tests for overview of alert profiles page (#2741) - Add make rule for cleaning doc directory (#2717) - Add an snmpd service container for SNMPv3 comms testing (#2697) Fixed ===== - Improve validation of maintenance form input in order to avoid unintentional crash reports (#2757) - Handle invalid alert profile ID form input without crashing (#2756) - Prevent crash errors in esoteric situations where multiple dashboards have been erroneously marked as a user’s default dashboard (#2680) - Fix broken navoidverify command on Linux (#2737) - Several regressions related to input validation in Alert Profiles were fixed: - Fix regression that prevented filter groups from being deleted from an alert profile (#2729) - Fix regression that prevented activation/deactivation of alert profiles (#2732) - Fix form validation with “equal” and “in” operators for adding expression with group to filter (#2750) - Add more expression operator tests for alert profiles and fix cleaning in ExpressionForm (#2752) Developer-centric fixes ----------------------- - Restructure alert profile tests (#2739) Changed ======= - Allow write-enabled SNMP profiles to be used for reading when device has no read-only SNMP profiles (#2735, #2751) - Improved howto guide for setting up remote user authentication using mod_auth_oidc (#2708) Developer-centric changes ------------------------- - Refactored web authentication code in preparation for future changes to authentication flow (#2706) Removed ======= Developer-centric removals -------------------------- - Remove remaining uses of Netbox.snmp_version (#2522) - Remove unused function snmp_parameter_factory (#2753) - Remove deprecated Netbox SNMP properties (#2754, #2761) Release notes ============= We always advise you to have a look at NAV's accompanying release notes [3] before upgrading. Happy NAVing everyone! Links ===== [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-8 -- Sincerely, Morten Brekkevold Sikt – Norwegian Agency for Shared Services in Education and Research

2 1

Unable to deactivate alert profile
by Ingeborg Hellemo 13 Nov '23

13 Nov '23

NAV 5.7.1 FreeBSD 12.4 Python 3.9 When visiting /alertprofiles/profile/ and choosing "Deactivate" on a profile we get an error. Since this is not something we do every day I'm not sure if this began after upgrading to 5.7.1 or if it has been broken for a while. During last upgrade I also upgraded python from 3.8 to 3.9 which could have introduced the error. Internal Server Error: /alertprofiles/profile/remove/ RuntimeError at /alertprofiles/profile/remove/ dictionary keys changed during iteration Request Method: POST Request URL: https://nav.uit.no/alertprofiles/profile/remove/ Django Version: 3.2.23 Python Executable: Python Version: 3.9.18 Python Path: ['/usr/local/lib/python39.zip', '/usr/local/lib/python3.9', '/usr/local/lib/python3.9/lib-dynload', '/usr/local/lib/python3.9/site-packages ', '/usr/local/lib/python3.9/site-packages', '/etc/nav/python'] Server time: Mon, 13 Nov 2023 09:25:39 +0100 Installed Applications: ('nav.models', 'nav.web', 'nav.django', 'django.contrib.staticfiles', 'django.contrib.sessions', 'django.contrib.humanize', 'django_filters', 'crispy_forms', 'crispy_forms_foundation', 'rest_framework', 'nav.auditlog', 'nav.web.macwatch', 'nav.web.geomap', 'nav.portadmin.napalm', 'nav.web.portadmin', 'django.contrib.postgres') Installed Middleware: ('django.middleware.common.CommonMiddleware', 'django.contrib.sessions.middleware.SessionMiddleware', 'nav.web.auth.AuthenticationMiddleware', 'nav.web.auth.AuthorizationMiddleware', 'nav.django.legacy.LegacyCleanupMiddleware', 'django.contrib.messages.middleware.MessageMiddleware') Traceback (most recent call last): File "/usr/local/lib/python3.9/site-packages/django/core/handlers/exception.p y", line 47, in inner response = get_response(request) File "/usr/local/lib/python3.9/site-packages/django/core/handlers/base.py", line 181, in _get_response response = wrapped_callback(request, *callback_args, **callback_kwargs) File "/usr/local/lib/python3.9/site-packages/nav/web/alertprofiles/decorators .py", line 47, in _handler return func(request, *args, **kwargs) File "/usr/local/lib/python3.9/site-packages/nav/web/alertprofiles/views.py", line 316, in profile_remove for data in post: Exception Type: RuntimeError at /alertprofiles/profile/remove/ Exception Value: dictionary keys changed during iteration Request information: USER: [unable to retrieve the current user] GET: No GET data POST: deactivate=1004 = 'Deactivate' FILES: No FILES data More logs avaliable. --Ingeborg -- Ingeborg Østrem Hellemo -- ingeborg.hellemo(a)uit.no Dep. of Information Technology --- Univ. of Tromsø

2 2

nav installation
by Kejvan Redjamand 13 Okt '23

13 Okt '23

Hi, I have had problems installing nav 57.1-2 on a Debian 11 from NAV repository with 'apt install nav'. The installation give the following warning, you have the choice to click OK. Database initialization failed │ │ Script output: │ │ Traceback (most recent call last): │ File "/usr/sbin/navsyncdb", line 2, in <module> │ from nav.pgsync import main │ ModuleNotFoundError: No module named 'nav' <Ok> It is not possible to run "sudo -u postgres navsyncdb" after the installation either, same error message, for the same reason as above. I found that the symlinks are setup somehow wrong for nav binaries installed. I'm not a good python programmer but probably the virtual env is not setup or configured as it should. /opt/venvs/nav/bin# ls -l python* lrwxrwxrwx 1 root root 16 Sep 18 14:09 python -> /usr/bin/python3 lrwxrwxrwx 1 root root 6 Sep 18 14:09 python3 -> python lrwxrwxrwx 1 root root 6 Sep 18 14:09 python3.9 -> python because in my case: /usr/bin/python3 -> python3.11 And ### /opt/venvs/nav/pyvenv.cfg home = /usr implementation = CPython version_info = 3.9.2.final.0 virtualenv = 20.4.0+ds include-system-site-packages = false base-prefix = /usr base-exec-prefix = /usr base-executable = /usr/bin/python3 So I chnged base-executable to /usr/bin/python3.9 And the links to /opt/venvs/nav/bin# rm python /opt/venvs/nav/bin# ln -s /usr/bin/python3.9 python So everything points to Python 3.9.2. Now with every attempt for installation of any package I get: Configuring nav │ │ Attempt to modify config file /etc/nav/db.conf failed │ │ │ Script output: │ │ <Ok> It seems that dpkg wants to run post installations and something goes wrong. And this output: Configuring nav │ │ Database initialization failed │ │ Script output: │ │ connection to server at "localhost" (::1), port 5432 failed: FATAL: │ password authentication failed for user "nav" │ connection to server at "localhost" (::1), port 5432 failed: FATAL: │ password authentication failed for user "nav" │ │ Creating database nav owned by nav │ │ <Ok> E: Sub-process /usr/bin/dpkg returned an error code (1) I have tried to drop the database, creating new database, changing the password, set the password other ways, uninstall nav and reinstall but without any results. I am out of ideas and any help is appreciated. Fixing the instalation scripts or Python venvs is it possible to do? Kind Regards, Kejvan

2 2

Announcement: NAV 5.7.1 released
by Morten Brekkevold 18 Sep '23

18 Sep '23

The first maintenance release of the 5.7 series of NAV is now out! The source code is available for download at GitHub [1]. New packages for Debian 10 (Buster) and 11 (Bullseye) are available in our APT repository [2] as usual. We haven't started building packages for Debian 12 (Bookworm) yet, but hope to do so by the end of 2023. Please be extra aware of config file changes. Look out for `*.dpkg-dist` files in `/etc/nav` and make sure to update your running config. Fixed ===== - Fixed regression that caused Netmap to be unusable in 5.7.0 (#2681, #2683) Release notes ============= We always advise you to have a look at NAV's accompanying release notes [3] before upgrading. Happy NAVing everyone! Links ===== [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-7 -- Sincerely, Morten Brekkevold Sikt – Norwegian Agency for Shared Services in Education and Research

1 0

Setting device group for a device through API
by Håvard Ose Nordstrand 15 Sep '23

15 Sep '23

Hi! We're using a Python script to import devices from a Cisco DNA inventory, but I can't seem to find a way to set a device group for the devices through the API. I'm using PATCH with the "/api/1/netbox/{netbox_id}/" endpoint, but as far as I can understand from the source code, it only supports certain special attributes like "organizationid", "roomid" etc. and not arbitrary device attributes. Is this implemented? If not, would it be easy for me to implement a new API endpoint attribute for this or would this tie into a lot of other things? -- Med vennlig hilsen Håvard Ose Nordstrand Overingeniør – Faggruppe Nett NTNU IT, Drift [cid:8e2b2110-e280-4f3f-8c21-434fb33f3b8b]

2 3

NAV with Cisco 3850
by Mischa Diehm 15 Sep '23

15 Sep '23

Hi, we have a 3850 Stack with 3x ES-C3850-48T-S and 5x WS-C3850-12X48U. When we try to PortAdmin and edit a Port we get (see also attached Jpg): „IP device found but has no type“ Any ideas? Cheers, Mischa -- Mischa Diehm | Network Team (NINS) UniBasel | IT-Services (ITS) Klingebergstr. 70 | CH-4056 Basel Tel. +41 61 267 1574 | https://its.unibas.ch

4 4

Alert profiles : how to read/check filters values ? set schedules ?
by FOUR Ludovic (EXT) 15 Sep '23

15 Sep '23

Hello, With the last version NAV 5.7, we can now create filters and raise alarms from Juniper chassis led (red or yellow) in the alert profiles. Thank you :) I'm trying to create new filters, but I can't check if it works really Can we list the values of all filters somewhere, for each device ? (Psql request ?) I trying to create an alert profile to send specific alarms at specific time for a specific group of users In my test profile, I can add a time period and choose start time (with valid format HH:MM or HH), and add subscriptions. In profile details the time periods valid during is 07:30 - 07:30 I don't know how to set a schedule from my subscriptions, for example from 7:30am (7h30) to 9pm (21h00) in weekdays. Regards, Ludovic FOUR CNRS / Faculté de Pharmacie Strasbourg France

2 1

default Dashboard
by Marcos Tadeu 13 Sep '23

13 Sep '23

HI, The first dashboard appear without user login How change the default dashboard ? TIA!

1 1

Announcement: NAV 5.7.0 released
by Morten Brekkevold 07 Sep '23

07 Sep '23

The first feature release of the 5.7 series of NAV is now out! The source code is available for download at GitHub [1]. New packages for Debian 10 (Buster) and 11 (Bullseye) are available in our APT repository [2] as usual. We haven't started building packages for Debian 12 (Bookworm) yet, but hope to do so by the end of 2023. Please be extra aware of config file changes. Look out for `*.dpkg-dist` files in `/etc/nav` and make sure to update your running config. Added ===== - Even more complex and flexible configuration of NAV logging is now supported through logging.yml (#2659) - Added howto guide for log configuration (#2660) - Currently non-functional (aka. "blacklisted") alert sender mechanisms are now flagged in the Alert Profiles tool wherever an affected alert address is displayed (#2653, #2664, #2677, #2678) - Added support for polling and alerting on Juniper chassis and system alerts (#2358, #2388) - Juniper only provides alert counters via SNMP, no alert details, unfortunately. - Since NAV doesn't support alert state updates, a new eventengine plugin handles alert count transitions by resolving old alerts and creating new ones (#2432, #2519) - Added a new contains_address filter to the prefix API endpoint, to enable lookup of matching prefix/vlan details from a single IP or subnet address (#2577, #2578) - Defined and added abstract methods for Power-over-Ethernet configuration to PortAdmin management handler classes (#2636) - These are needed for the upcoming vendor specific implementations of PoE config in PortAdmin. - Implemented configuration file parsing for upcoming local JWT token feature (#2568) Fixed ===== User-visible fixes ------------------ - Properly dispose of outgoing alert notifications to invalid alert addresses (#2661) - Fixed crash when attempting to log device errors with an empty comment in the Device History tool (#2579, #2580) - Fixed bad styling and missing linebreaks in traceback section of the 500 error page (#2607, #2628) - Show help text instead of error when running nav command without arguments (#2601, #2603) - Prevent users from entering invalid sysObjectID values when editing Netbox types in SeedDB (#2584, #2566) - Removed upper version bound for Pillow image manipulation library, to fix security warnings (#2567) - Alerts that cannot be sent due to blacklisted media plugins will no longer fill up alertengine.log every 30 seconds, unless DEBUG level logging is enabled (#1787, #2652) - DNS lookups in ipdevinfo are now properly case insensitive (#2615, #2650) - Alert Profiles will now properly require Slack alert addresses to be valid URLs (#2657) - 5 minute and 15 minute load average values will now be collected correctly for Juniper devices (#2671, #2672) - Fix cabling API, which broke due to internal refactorings (#2621) - Only install NAV's custom epollreactor2 in ipdevpoll if running on Linux (#2503, #2604) - Stops ipdevpoll from crashing on BSDs. Developer-centric fixes ----------------------- - Moved more of NAV's packaging definition to pyproject.toml (#2655) - Pin pip to version 23.1.0 for CI pipelines to continue working (#2647) - Improve ipdevpoll logging of SQL queries and from Twisted library (#2640) - Stop making skipped validation tests for non HTML content (#2623) - Version-locked indirect dependencies of test suites (#2622, #2617) - Improve SNMP forwarding/proxying container setup, including adding IPv6 support (#2637, #2516) - Documented a recipe for establishing SNMP tunnels when testing devices on otherwise unreachable networks (#2426, #2435) - Run Django development web server in "insecure" mode to improve simulation of a production environment when debug flag is turned off (#2625) - Added a proper docstring to bootstrap_django() function (#2619, #2168) - Stop restoring stale tox environment caches in GitHub workflows (#2605) - Added tests for ipdevpoll worker euthanization (#2599, #2548) - Added tests to ensure snmptrapd can properly look up a NAV router that sends traps from one of its non-management IP addresses (#2500, #2510) - Avoid redundant graphite time formatting strings by re-using constant (#2588, #2543) - Make detection of running in a virtualenv more compatible with modern toolchain (#2573) - Revert to having tox run its own dependency installer (#2572) - Added explicit back-relation names for several Django ORM models (#2544, #2546, #2547, #2549, #2550, #2551) Release notes ============= We always advise you to have a look at NAV's accompanying release notes [3] before upgrading. Happy NAVing everyone! Links ===== [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-7 -- Sincerely, Morten Brekkevold Sikt – Norwegian Agency for Shared Services in Education and Research

1 0

VLANs from PaloAlto router ports missing
by Philipp Petermann 03 Jul '23

03 Jul '23

Hi, At our university we use the portadmin "vlan_auth" feature to restrict access to certain VLANs for certain organizations. Now we have the problem that a VLAN that we want to give access to is missing in NAV and we couldn't find a way to just add this VLAN. From what I understand VLANs are added automatically by ipdevpoll from detected router ports. Now the reason for this missing VLAN most probably is the fact that it is routed on a PaloAlto firewall. This firewall exists in NAV as type "Palo Alto Networks PA-5200 (Palo Alto Networks PA-5200 series firewall from PaloAlto)" (sysobjectid 1.3.6.1.4.1.25461.2.3.23) but no router ports are reported (count 0). So my questions at this point are: - Is there a way to manually add VLANs so the can be used by "vlan_auth"? - Is my assumption correct that the VLAN is missing because the PaloAlto router ports are not correctly detected? - Should PaloAlto router ports normally be detected with NAV? - If so, how can I fix this? And if not, is there any workaround available? - Is https://github.com/Uninett/nav/pull/2613 a solution to this? We are currently using NAV 5.5.2 Thanks and best regards, -- Philipp Petermann Universität Basel | ITS | NINS Spitalstrasse 41 | 4056 Basel | Schweiz Tel. +41 61 207 15 74

4 3

← Newer
1
2
3
4
5
6
7
...
138
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Nav-users